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Amendments To The Claims: 

1. (Original): An access control system for controlling access to data stored on at least one data 
storage medium of a computing system, the access control system comprising: 

authentication means to authenticate users permitted to access data stored in the at least 
one data storage medium; and 

database means arranged to store data access profiles; 

each data access profile being associated with a user permitted to access data stored in the 
at least one data storage medium; 

each data access profile including information indicative of the degree of access permitted 
by a user to data stored in the at least one data storage medium; and 

each data access profile including a master data access profile and a current data access 
profile, the current data access profile being modifiable within parameters defined by the master 
data access profile. 

2. (Original): An access control system as claimed in claim 1, fiirther comprising profile setting 
means arranged to facilitate creation of the master and current access profiles. 

3. (Original): An access control system as claimed in claim 2, wherein the access control system 
is incorporated into a computing system having an operating system and the master data access 
profile is modifiable only prior to loading of the operating system. 

4. (Original): An access control system as claimed in claim 1, wherein said control system is 
activatable so as to permit modification of the current access profile and deactivatable so as to 
prevent modification of the current access profile. 
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5. (Original): An access control system as claimed in claim 1, wherein the access control system 
is implemented at least in part in the form of software. 

6. (Original): An access control system as claimed in claim 1, wherein the access control system 
is implemented at least in part in the form of hardware. 

7. (Original): An access control system as claimed in claim 2, wherein the access control system 
is arranged to govern user access profiles used by a security device configured to control access 
to a data storage medium. 

8. (Original): An access control system as claimed in claim 7, wherein the security device is 
implemented at least in part in hardware and is of a type located between a data storage medium 
of a computing system and a CPU of the computing system. 

9. (Original): An access control system as claimed in claim 7, wherein the security device is 
implemented at least in part in hardware and is of a type incorporated into bus bridge circuitry of 
a computing system. 

1 0. (Original): An access control system as claimed in claim 1 , wherein the access control 
system is incorporated into a computing system having an operating system and the current access 
profile is modifiable after loading of the operating system. 

1 1 . (Original): A method of controlling access to data stored on at least one data storage 
medium of a computing system, the method comprising the steps of 

providing means for authenticating users permitted to access data stored in the at least one 
data storage medium; and 

storing data access profiles; 

associating each data access profile with a user permitted to access data stored in the at 
least one data storage medium; 
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each data access profile including information indicative of the degree of access permitted 
by a user to data stored in the at least one data storage medium; and 

each data access profile including a master data access profile and a current data access 
profile; and 

facihtating modification of the current data access profile being within parameters defined 

by the master data access profile. 

12. (Original): A method as claimed in claim 11, fiirther comprising the step of facilitating 
creation of the master and current access profiles. 

13. (Original): A method as claimed in claim 12, wherein the access control system is 
incorporated into a computing system having an operating system, and the step of facihtating 
modification of the current data access profile includes the step of facihtating modification of the 
master data access profile only prior to loading of the operating system. 

14. (Original): A method as claimed in claim 11, fiirther including the steps of facilitating 
activation of said control system so as to permit modification of the current access profile and 
facihtating deactivation of said control system so as to prevent modification of the current access 
profile. 

1 5 . (Original) : A method as claimed in claim 1 1 , wherein the access control system is 
implemented at least in part in the form of software. 

16. (Original): A method as claimed in claim 11, wherein the access control system is 
implemented at least in part in the form of hardware. 

17. (Original): A method as claimed in claim 11, fiirther comprising the step of arranging 
the access control system so as to govern user access profiles used by a security device configured 
to control access to a data storage medium. 
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18. (Original): A method as claimed in claim 17, wherein the security device is 
implemented at least in part in hardware and is of a type located between a data storage medium 
of a computing system and a CPU of the computing system. 

19. (Original): A method as claimed in claim 17, wherein the security device is 
implemented at least in part in hardware and is of a type incorporated into bus bridge circuitry of 
a computing system. 

20. (Original): A method as claimed in claim 11, further comprising the steps of 
incorporating the access control system into a computing system having an operating system and 
facilitating modification of the current access profile after loading of the operating system. 

2 1 . (Original): A computer program which when loaded into a computing system causes 
the computing system to operate in accordance with an access control system for controlling 
access to data stored on at least one data storage medium of a computing system, the access 
control system comprising: 

authentication means to authenticate users permitted to access data stored in the at least 
one data storage medium; and 

database means arranged to store data access profiles; 

each data access profile being associated with a user permitted to access data stored in the 
at least one data storage medium; 

each data access profile including information indicative of the degree of access permitted 
by a user to data stored in the at least one data storage medium; and 

each data access profile including a master data access profile and a current data access 
profile, the current data access profile being modifiable within parameters defined by the master 
data access profile. 
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22. (Original): 



A computer useable medium having a computer readable program code 



embodied therein for causing a computer to operate in accordance with an access control system 
for controlling access to data stored on at least one data storage medium of a computing system, 
the access control system comprising: 

authentication means to authenticate users permitted to access data stored in the at least 
one data storage medium; and 

database means arranged to store data access profiles; 

each data access profile being associated with a user permitted to access data stored in the 
at least one data storage medium; 

each data access profile including information indicative of the degree of access permitted 
by a user to data stored in the at least one data storage medium; and 

each data access profile including a master data access profile and a current data access 
profile, the current data access profile being modifiable within parameters defined by the master 
data access profile. 



